Lucene search
+L

1005 matches found

OSV
OSV
added 2024/01/05 12:15 p.m.4 views

CVE-2023-52124

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShapedPlugin LLC WP Tabs – Responsive Tabs Plugin for WordPress allows Stored XSS.This issue affects WP Tabs – Responsive Tabs Plugin for WordPress: from n/a through 2.2.0...

5.4CVSS7.3AI score0.00303EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/05 11:17 a.m.2 views

CVE-2023-52124 WordPress WP Tabs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShapedPlugin LLC WP Tabs – Responsive Tabs Plugin for WordPress allows Stored XSS.This issue affects WP Tabs – Responsive Tabs Plugin for WordPress: from n/a through 2.2.0...

6.5CVSS6.7AI score0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/01/05 11:17 a.m.18 views

CVE-2023-52124 WordPress WP Tabs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ShapedPlugin LLC WP Tabs – Responsive Tabs Plugin for WordPress allows Stored XSS.This issue affects WP Tabs – Responsive Tabs Plugin for WordPress: from n/a through 2.2.0...

6.5CVSS6.7AI score0.00303EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/01/05 12:0 a.m.7 views

PT-2024-14421 · WordPress · Wp Tabs

Name of the Vulnerable Software and Affected Versions: WP Tabs – Responsive Tabs Plugin for WordPress versions prior to 2.2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means...

6.5CVSS6.2AI score0.00303EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
added 2024/01/05 12:0 a.m.12 views

WP Tabs < 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The WP Tabs – Responsive Tabs Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

6.5CVSS5.7AI score0.00303EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/01/05 12:0 a.m.6 views

WordPress Plugin WP Tabs Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS6AI score0.00303EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/01/05 12:0 a.m.10 views

The vulnerability of Mozilla Firefox browser tabs’ headers, which allows a hacker to disclose protected information

The vulnerability in the browser tabs headers of Mozilla Firefox relates to the disclosure of information through registration files. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

7.8CVSS6.7AI score0.00646EPSS
SaveExploits1References8Affected Software3
Patchstack
Patchstack
added 2023/12/28 12:0 a.m.12 views

WordPress WP Tabs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Tabs Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-52124 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a52c5f0b85cc Credits Ray Wilson Required privilege Contributor...

6.5CVSS6.6AI score0.00303EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/12/12 1:15 a.m.6 views

CVE-2023-42923

This issue was addressed through improved state management. This issue is fixed in iOS 17.2 and iPadOS 17.2. Private Browsing tabs may be accessed without authentication...

5.3CVSS5.7AI score0.00674EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2023/12/02 12:0 a.m.15 views

IdeaPush < 8.58 - Subscriber+ Memory Tab/Routine/Taxonomy Creation

Description The plugin does not have authorisation in various AJAX calls, allowing any authenticated users, such as subscriber to create memory tabs, routines and taxonomies...

6.9AI score0.00462EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2023/10/09 5:25 p.m.21 views

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in Custom Mobile Tabs in the library, which allows an attacker to spoof security UI via a maliciously crafted HTML page...

4.3CVSS6.5AI score0.00663EPSS
SaveExploits0References8Affected Software1
Veracode
Veracode
added 2023/10/09 5:25 p.m.24 views

Improper Input Validation

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in the Custom Tabs of the library, which allows an attacker to obfuscate a permission prompt via a crafted HTML page...

4.3CVSS6.4AI score0.00663EPSS
SaveExploits0References8Affected Software1
Mageia
Mageia
added 2023/10/03 10:53 a.m.44 views

Updated chromium-browser-stable package fixes bugs and vulnerabilities

The chromium-browser-stable package has been updated to the 117.0.5938.92 release, fixing bugs and 31 vulnerabilities, together with 117.0.5938.92, 117.0.5938.88, 117.0.5938.62, 116.0.5845.187 and 116.0.5845.179. Google is aware that an exploit for CVE-2023-5217 exists in the wild. High...

8.8CVSS9.7AI score0.99735EPSS
SaveExploits14References7
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.17 views

The vulnerability of Google Chrome’s user tabs allows a hacker to replace the user’s interface.

The vulnerability of Google Chrome’s user tabs is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

5CVSS5.5AI score0.00663EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:0 a.m.8 views

The vulnerability of Google Chrome’s user tabs allows a hacker to bypass existing security restrictions.

The vulnerability of user tabs in Google Chrome is related to the improper use of standard permissions. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...

5CVSS5.4AI score0.00663EPSS
SaveExploits0References8Affected Software4
Tenable Nessus
Tenable Nessus
added 2023/09/19 12:0 a.m.38 views

Debian DSA-5499-1 : chromium - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5499 advisory. - Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate a permission prompt v...

4.3CVSS7.1AI score0.00717EPSS
SaveExploits0References25
CNVD
CNVD
added 2023/09/17 12:0 a.m.46 views

Google Chrome Security Bypass Vulnerability (CNVD-2023-75497)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome prior to version 117.0.5938.62, which stems from an improper implementation of the Custom Mobile Tabs module. An attacker can exploit the vulnerability to bypass security...

4.3CVSS6.1AI score0.00663EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/09/17 12:0 a.m.44 views

Google Chrome Security Bypass Vulnerability (CNVD-2023-75496)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome prior to version 117.0.5938.62, which stems from an improper implementation of the Custom Tabs module. An attacker can exploit the vulnerability to bypass security restrictions...

4.3CVSS6.1AI score0.00663EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/09/16 6:15 a.m.7 views

CVE-2023-41157

Multiple stored cross-site scripting XSS vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the folder name parameter while creating the folder to manage the folder tab, filter tab, and forward mail tab...

5.4CVSS5.8AI score0.00397EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/09/16 2:5 a.m.9 views

SUSE CVE-2023-4900

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate a permission prompt via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS8.6AI score0.00663EPSS
SaveExploits0References4
Rows per page
Query Builder